Privacy Policy

This Privacy Policy explains how Primary Care Training Services (“we”, “us”, “our”) collects, uses and protects your personal data when you visit pctservices.co.uk and book our training courses. We are the “data controller” for the personal data described in this policy.

1Who we are

Primary Care Training Services, First Floor, 2 Queen Street, Northwich, Cheshire, CW9 5JL. Email: admin@primarycaretrainingservices.co.uk. Phone: 07958 915146

If you have any questions about this policy or how we handle your data, please contact us using the details above.

2Information we collect

Information you provide

• Your name, email address and phone number
• Your organisation or employer, where relevant
• Booking details, such as the course, date and attendee information
• Payment details, which are processed securely by Stripe — we never see or store your full card number
• Any information you include in an enquiry or contact form
• Account details (your email address) if you create an account to manage bookings

Information collected automatically

When you use our site we collect limited technical information (such as your approximate region and device type) through anonymous analytics, together with short-lived security data used to protect our forms and your account. This is explained in the next section.

3Cookies and analytics

Strictly necessary cookies (no consent required)

We use a small number of essential cookies that are required for the website to work — for example, to keep you signed in, to process a booking, and to protect our forms from spam and abuse using Cloudflare Turnstile. These do not require consent because the site cannot function without them.

Anonymous analytics (no consent required)

We use privacy-friendly, fully anonymous analytics (OpenPanel) to understand how our site is used. It does not use cookies, does not collect personal data, and does not track you across websites — it only produces aggregate, anonymised statistics. Because no personal data is processed, this does not require your consent under UK data protection and PECR rules.

Google Tag Manager (optional — consent required)

We use Google Tag Manager to measure which of our Google Ads lead to bookings. It only sets advertising cookies if you click Accept on our cookie banner, and you can change your choice at any time using Cookie Settings at the bottom of every page.

4How we use your information

• To provide our training courses and manage your bookings
• To take payment and issue receipts and certificates
• To send you booking confirmations and essential service messages
• To respond to your enquiries
• To meet our legal and regulatory obligations
• To keep our website secure and to improve it using anonymous analytics
• For advertising and marketing, only where you have given consent

5Legal bases for processing

Under UK GDPR we rely on the following legal bases:

• Contract: to take and fulfil your course bookings.
• Legitimate interests: to run and secure our business and to understand site usage through anonymous analytics.
• Consent: for advertising and marketing via Google Tag Manager.
• Legal obligation: to keep financial and other records required by law.

6Who we share your information with

We use trusted service providers who process data on our behalf, including: Stripe (payments), Supabase (secure database, accounts and file storage), Vercel (website hosting), Sanity (website content), Cloudflare (security and bot protection), OpenPanel (anonymous analytics) and Google (advertising and marketing, only with your consent). We do not sell your personal data.

7International data transfers

Some of our providers are based outside the UK. Where personal data is transferred internationally, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

8How long we keep your data

We keep personal data only for as long as necessary. Booking and payment records are retained for the period required by tax and accounting law (generally six years). Account information is kept while your account remains active, and enquiry messages are kept for a reasonable period before deletion.

9Your rights

Under UK data protection law you have the right to access, correct, delete, restrict or object to our use of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise any of these rights, please contact us using the details above.

10Data security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and reputable infrastructure providers. No method of transmission over the internet is completely secure, but we take reasonable steps to safeguard your information.

11Children

Our courses and bookings are intended for adults and professionals. We do not knowingly collect personal data from children.

12Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last updated.

13Contact us

Primary Care Training Services, First Floor, 2 Queen Street, Northwich, Cheshire, CW9 5JL. Email: admin@primarycaretrainingservices.co.uk. Phone: 07958 915146.